Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: jZ/wZUKHrrpRBnpbw7CI5hp1MMpR3zmV+xzNrzvX1ek=
Subject key identifier: 5C:AB:EA:B6:84:4C:0E:94:CD:7E:AA:33:EA:9E:AB:1E:8D:88:69:80
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 0196BAED68C8AAFF7BCA5EDBF11C544A75F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 0838
Signing time: Sat 10 May 2025 16:00:43 +0000
Manifest this update: Sat 10 May 2025 16:00:43 +0000
Manifest next update: Sun 11 May 2025 16:00:43 +0000
Files and hashes: 1: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: 1b9YEh+7k0nWZGasceItVjDS0rdHr5zVNBHRWy0FhIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:68:c8:aa:ff:7b:ca:5e:db:f1:1c:54:4a:75:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: May 10 16:00:43 2025 GMT
Not After : May 11 16:00:43 2025 GMT
Subject: CN=5cabeab6844c0e94cd7eaa33ea9eab1e8d886980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:92:03:2a:1c:1b:0e:81:27:59:20:3a:c9:
a1:ff:63:3e:45:54:fd:16:e9:24:a2:00:22:09:80:
22:33:b6:88:be:0c:50:14:8c:b6:e8:25:07:45:16:
92:44:cb:e3:2b:ac:0c:50:3a:52:2d:09:f9:bf:35:
23:f7:72:5b:98:35:f0:7d:2e:4b:11:f3:d4:71:f3:
fd:76:1b:c9:29:fd:aa:11:c3:6e:5b:a2:d2:51:11:
1d:38:c1:b4:0b:74:9e:54:55:03:0a:c1:97:34:0e:
e1:0d:7a:0d:0a:93:34:dc:ab:6d:aa:1e:14:e6:9f:
c0:01:dd:fa:70:3d:80:d5:25:7a:e2:56:7a:2c:56:
48:ce:f6:f5:5c:f0:15:26:88:6e:da:6f:23:0c:60:
09:c1:ee:90:c9:0a:fd:50:e6:e6:3e:e4:66:95:54:
02:a2:a3:57:95:ad:a7:81:be:9b:79:f9:35:33:4f:
96:05:27:d2:02:1c:d0:54:07:98:ca:6e:03:bf:a7:
0f:c8:b2:c8:ca:0e:0f:01:a8:6f:70:de:57:76:9e:
8e:77:53:67:92:e4:24:a1:b3:14:c1:1d:cc:0f:b3:
8a:ab:b9:ea:13:e9:48:47:40:24:d5:9d:10:1c:4b:
50:23:51:0d:a6:08:85:db:50:4f:1e:cc:36:44:56:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:EA:B6:84:4C:0E:94:CD:7E:AA:33:EA:9E:AB:1E:8D:88:69:80
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c0:ee:bb:de:77:4d:cd:d1:29:ac:64:ec:2f:45:73:d6:85:
14:ea:d4:35:4f:a5:c4:9d:38:62:ea:e9:62:24:a4:3f:e2:54:
79:a2:3f:fb:84:cc:1a:39:15:cf:df:25:14:99:64:d4:3a:b1:
99:50:51:c9:e0:9d:79:08:9a:f1:1b:ce:fd:45:20:ca:bf:3a:
8d:b8:01:78:e6:eb:ba:6d:9d:c1:ac:d6:c0:9e:ef:7e:bf:eb:
bd:a4:19:54:1f:3b:6e:b3:16:aa:9d:8a:b7:63:85:37:bb:b5:
66:f4:4b:d8:86:6c:7c:99:69:74:cc:2c:f4:4e:88:c3:45:c3:
46:4d:90:2f:9e:e2:aa:0e:0b:e7:b7:c6:67:2e:88:4b:bb:e7:
eb:5f:4f:e3:20:e3:f2:dc:41:0f:b8:9d:30:26:1c:cd:1c:05:
ef:c7:dc:f5:d2:e1:a6:7b:04:cd:2e:18:c9:7d:50:30:23:13:
d6:d0:df:52:77:96:31:d2:15:dd:29:2f:27:24:a5:27:45:4b:
16:e2:f2:79:28:ad:a2:8e:69:88:48:78:51:0c:c3:65:86:a8:
44:d4:b5:4a:e6:c1:56:6f:0b:dd:ce:2f:31:84:a8:da:c8:0c:
10:db:46:43:27:e6:54:9e:f7:e5:cb:36:a2:d8:fb:e6:8b:76:
a1:28:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:14:02 2025 by rpki-client